Skip to main content

​
GET /.well-known/oauth-authorization-server

Return or proxy OAuth authorization server metadata for the configured WorkOS tenant
Use this endpoint when configuring OAuth metadata for hosted MCP clients.

​
Response metadata

  • requestId
  • traceparent

​
Example request

curl -X GET \
  -H "x-api-key: $SECAPI_API_KEY" \
  -H "secapi-version: 2026-03-19" \
  "https://api.secapi.ai/.well-known/oauth-authorization-server"

​
Example response

{
  "requestId": "req_example_123",
  "traceparent": "00-4bf92f3577b34da6a3ce929d0e0e4736-00f067aa0ba902b7-01"
}

​
Give this prompt to your agent

Copy this SEC API prompt for your agent.

​
Errors and partial results

  • Treat non-2xx responses as API errors and log the response body for debugging
  • Log requestId and traceparent so SEC API support can trace the request
  • if provenance or freshness metadata is present, return it unchanged so trust is not lost in the handoff